Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/e8LGb2_gN-VUPF0Dg9Om4aP33k0.roa
File: e8LGb2_gN-VUPF0Dg9Om4aP33k0.roa (raw, json)
Hash identifier: 6hablptfQQt05NhOypta75XtRDwXfAbDdsgVc+xWj4E=
Subject key identifier: 7B:C2:C6:6F:6F:E0:37:E5:54:3C:5D:03:83:D3:A6:E1:A3:F7:DE:4D
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A1B1680D77245FC7779A4235EE1AC6BCF0
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/e8LGb2_gN-VUPF0Dg9Om4aP33k0.roa
Signing time: Fri 06 Nov 2026 15:09:08 +0000
ROA not before: Fri 06 Nov 2026 15:09:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218261
IP address blocks: 163.245.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b1:68:0d:77:24:5f:c7:77:9a:42:35:ee:1a:c6:bc:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Nov 6 15:09:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7bc2c66f6fe037e5543c5d0383d3a6e1a3f7de4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:81:ce:7d:b6:eb:be:6d:31:0b:9b:7e:2e:
62:53:6e:fd:55:d8:cf:37:f7:15:0e:be:c1:b9:92:
28:07:71:6b:30:5f:34:1f:3b:1f:9b:80:3d:89:ff:
7b:ac:63:6e:ca:90:02:a8:3f:59:c2:ca:30:4f:5a:
6c:da:d1:de:9a:e3:e8:68:79:c7:2f:50:ec:cc:c5:
c8:76:fb:53:82:74:2e:76:ee:3c:c3:b5:a0:ad:13:
14:53:6f:3c:db:80:f0:4c:77:17:51:75:d8:f5:58:
59:c4:a4:45:d3:5f:41:cb:6a:54:44:b6:9a:e7:7e:
3b:65:96:2b:61:f0:e5:2d:47:d3:e5:b7:43:f0:5b:
24:da:e9:f9:dc:6c:84:18:19:bd:ea:a6:dc:db:21:
1f:f3:61:e2:c4:11:8d:ed:00:04:11:b5:4b:39:03:
2b:5b:38:d2:72:6c:1b:4a:89:6a:e4:45:75:78:d4:
45:7f:1d:b2:8e:3e:2a:44:56:a4:74:e5:ed:cb:ac:
a9:97:10:a5:b1:d8:dc:c8:04:77:40:a1:e1:af:46:
5a:22:e8:67:72:87:2b:29:74:2e:bb:01:07:70:5e:
c3:49:5c:7d:94:86:56:53:78:71:02:29:b9:92:18:
aa:b1:62:b6:1a:c9:fa:a1:44:0c:e8:e4:10:77:49:
c5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:C6:6F:6F:E0:37:E5:54:3C:5D:03:83:D3:A6:E1:A3:F7:DE:4D
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/e8LGb2_gN-VUPF0Dg9Om4aP33k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.245.63.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:10:86:0a:e6:94:4b:93:60:75:5d:f9:a7:28:58:e8:d3:2a:
be:cb:c0:a3:d5:cd:4c:95:dc:d2:e6:88:57:55:2d:20:21:c7:
fa:ea:ce:3a:32:8a:d2:a8:b4:db:2a:30:c6:8a:54:f5:77:48:
63:64:dc:fc:f5:62:85:dd:7a:46:ec:de:ea:f1:73:77:f4:31:
f1:22:8c:f4:db:26:3c:cc:b4:3e:6d:bb:c9:a7:ea:4e:74:e0:
69:99:64:f0:53:83:de:56:aa:ef:3f:20:3b:e5:d1:c0:34:8a:
dd:fb:e0:04:25:aa:1d:12:31:8c:70:7a:49:31:4a:7e:0d:b5:
46:b8:28:ec:ea:21:6b:a0:d2:bc:97:07:09:2c:91:37:f9:14:
db:cc:a7:92:a0:9a:7b:72:c1:ed:7a:fc:67:70:69:be:17:ee:
35:ce:49:86:48:8b:2a:00:b6:0c:22:78:e9:a7:87:49:19:da:
07:37:9d:02:55:7d:fb:79:ad:ea:5f:85:55:3d:32:17:eb:1b:
e3:52:80:2b:57:31:02:01:ca:45:fa:f7:70:f6:d3:5e:fe:ac:
e6:88:b9:43:d9:6c:da:2e:dd:d4:f6:7c:7f:46:58:de:f6:72:
08:64:bf:82:3f:21:19:03:d3:c3:bb:d7:39:d9:48:58:16:e8:
58:05:d7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:16 2026 by rpki-client